#PrivilegedHelper

kriware :verified:kriware@infosec.exchange
2025-07-24

ControlPlane Local Privilege Escalation Vulnerability on macOS

Exploits ControlPlane’s privileged helper and dynamic library injection via malformed plist and rpath to escalate to root.

blog.quarkslab.com/controlplan

#macOS #LPE #PrivilegedHelper

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst